CLAIMS : 

What is claimed is: 

1 1. A system for accessing and executing instruction sequences in a 

2 physical memory from a virtual memory in a processor-based system, comprising: 

3 a memory for storing instruction sequences by which the processor- 

4 based system is processed, the memory including a physical memory and a virtual 

5 memory; and \ 

6 a processor for executing the stored instruction sequences; and 

7; wherein the stored instructior^sequences include process steps to cause 

ij the processor to: (a) map a plurality of predetermined instruction sequences from 

SE the physical memory to the virtual memory^j^determine an offset to one of said 

im plurality of predetermined instruction seq{ieWs4n the virtual memory; (c) receive 

If;; an instruction to execute the one of said plurality of predetermined instruction 

ill sequences; (d) transfer control to the one of said plurality of predetermined 

l|S instruction sequences; and (e) process the one of said plurality of predetermined 

14 instruction sequences from the virtual memory. \ 

1 2. The system of Claim 1, wherein in step (c), the instruction is made 

2 from an application program. 

1 3. The system of Claim 1, wherein in step (c), the instruction is made 

2 . from a class driver. \ 
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1 4. The sysWi of Claim 1, wherein step (a) comprises the steps of: 

2 (a.l) mapMng a plurality of BIOS instruction sequences from the 

3 physical memory to the virtual memory, said BIOS instruction sequences including 

4 a BIOS service directory; and 

5 (a.2) mapping BIOS data from the physical memory to the virtual 

6 memory. \ 

1 5. The system of Claim 4 wherein step (b) comprises the steps of: 

2 (b.l) determining a starting virtual address of the BIOS service 

3 directory; and \ 

4^ (b.2) determining a starting virtual address of one of the plurality of 

|J BIOS instruction sequences by reference tAthe BIOS service directory. 

fn 6. The system of Claim 5, whereinWep (d) comprises the steps of: 

2 (d.l) creating a register stack in a memory location; 

13 (d.2) identifying a location of the starting virtual address of one of the 

iJ plurality of BIOS instruction sequences in the register stack; and 

P (d.3) transferring control to the one of \he plurality of BIOS instruction 

6 sequences. \ 

1 7. The system of Claim 6, wherein in step (d.l)\the memory location is a 

2 buffer located in a dynamic random access memory (DRAMi 
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1 8. The system of Claim 6, wherein in step (d.l), the memory location is a 

2 buffer located in a ma\n memory. 

1 9. The system of Claim 6, wherein step (e) comprises the steps of: 

2 (e.l) determining if the starting virtual address is within a range of 

3 addresses mapped from the physical memory to the virtual memory; and 

4 (e.2) if so, executmg the one of the plurality of BIOS instruction 

5 sequences from the virtual memory, otherwise indicating that the starting virtual 
§i address is not within the range of addresses mapped from the physical memory to 
%j the virtual memory. \ 

1 1 10. A method for accessing and executing instruction sequences in physical 

2=* memory from virtual memory in a processpr-fe^sed system, comprising the steps of: 
J3 (a) mapping a plurality of predetermined instruction sequences from 

|; the physical memory to the virtual memory? 

5 (b) determining an offset to one of said plurality of predetermined 

6 instruction sequences in the virtual memory; \ 

7 (c) receiving an instruction to execute the one of said plurality of 

8 predetermined instruction sequences; \ 

9 (d) transferring control to the one of said plurality of predetermined 

10 instruction sequences; and \ 

11 (e) processing the one of said plurality of\predetermined instruction 

12 sequences from the virtual memory. \ 
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1 11. The methad of Claim 10, wherein in step (c), the instruction is made 

2 from an application program. 

1 12. The method ofOaim 10, wherein in step (c), the instruction is made 

2 from a class driver. \ 

1 13. The method of Claim 10, wherein step (a) comprises the steps of: 

2 (a.l) mapping a plurality of BIOS instruction sequences from the 

3 physical memory to the virtual memory, said BIOS instruction sequences including 

4 a BIOS service directory; and \ 

5 (a.2) mapping BIOS data from the physical memory to the virtual 
fe memory. \ 

% 14. The method of Claim l\wj?ierem step (b) comprises the steps of: 

§y (b.l) determining a starting virtual address of the BIOS service 

6 directory; and \ 

|1 (b.2) determining a starting virtual address of one of the plurality of 

§f BIOS instruction sequences by reference to the BIOS service directory. 

1 15. The method of Claim 14, wherein stfrp (d) comprises the steps of: 

2 (d.l) creating a register stack in a memory location; 

3 (d.2) identifying a location of the starting virtual address of one of the 

4 plurality of BIOS instruction sequences in the register\stack; and 
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5 (d.3) trareferring control to the one of the plurality of BIOS instruction 

6 sequences. 

1 16. The method V>f Claim 15, wherein in step (d.l), the memory location is 

2 a buffer located in a dynamic random access memory (DRAM). 

1 17. The method of Claim 15, wherein in step (d.l), the memory location is 

2 a buffer located in a main memory. 

\/ 

f f 18. The method of ClaiiA 15, wherein step (e) comprises the steps of: 

ij (e.l) determining if the starting virtual address is within a range of 

3E addresses mapped from the physical Vnemory to the virtual memory; and 
43 (e.2) if so, executing the one of the plurality of BIOS instruction 

5: sequences from the virtual memory, otherwise indicating that the starting virtual 

&i address is not within the range of addre^S^ mapped from the physical memory to 

In the virtual memory. 



1 19. Computer-executable process steps for. accessing and executing 

2 instruction sequences in physical memory from virtual memory in a processor- 

3 based system, the process steps including: 

4 (a) mapping a plurality of predetermined instruction sequences 

5 from the physical memory to the virtual memory; 

6 (b) determining an offset to one of said plul^lity of predetermined 

7 instruction sequences in the virtual memory; 
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8 (c) receiving an instruction to execute the one of said plurality of 

9 predetermined instruction sequences; 

10 (d) transferring control to the one of said plurality of predetermined 

11 instruction sequences; and \ 

12 (e) processing the one of said plurality of predetermined instruction 

13 sequences from the virtual memory. 

1 20. Computer-executable pfocess steps of Claim 19, wherein in step (c), the 

2 instruction is made from an application program. 

1 21. Computer-executable process steps of Claim 19, wherein step (a) 
2, comprises the steps of: \ 

|£ (a.l) mapping a plurality of BIOS instruction sequences from the 

|i physical memory to the virtual memory, spd BiOS instruction sequences including 

§1 a BIOS service directory; and . ^-Y \ 

6 (a.2) mapping BIOS data from\he physical memory to the virtual 

If memory. \ 

P 22. Computer-executable process steps of Claim 21, wherein step (b) 

2 comprises the steps of: \ 

3 (b.l) determining a starting virtual address of the BIOS service 

4 directory; and \ 

5 (b.2) determining a starting virtual address of\one of the plurality of 

6 BIOS instruction sequences by reference to the BIOS service directory. 
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1 23. Computer-executable process steps of Claim 22, wherein step (d) 

2 comprises the steps of: 

3 (d.l) creating a Yegister stack in a memory location; 

4 (d.2) identifying a location of the starting virtual address of one of the 

5 plurality of BIOS instruction sequences in the register stack; and 

6 (d.3) transferring control to the one of the plurality of BIOS instruction 

7 sequences. 

1 24. Computer-executable process steps of Claim 23, wherein in step (d.l), 

2 the memory location is a buffer located a dynamic random access memory 
3„ (DRAM). 



Tir 25. Computer-executable process/ 

2Tt the memory location is a buffer located ii 



?P S > 



n Claim 23, wherein in step (d.l), 
memory. 



C 26. Computer-executable process steps fl^f Claim 23, wherein step (e) 

2[j comprises the steps of: 

3p (e.l) determining if the starting virtual\address is within a range of 

4 addresses mapped from the physical memory to the vktual memory; and 

5 (e.2) if so, executing the one of the plurality of BIOS instruction 

6 sequences from the virtual memory, otherwise that the starting virtual address is 

7 not within the range of addresses mapped from the physicalynemory to the virtual 

8 memory. 
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1 27. A system for accessing instruction sequences in a physical memory 

2 from a virtual memory iA a processor-based system, comprising: 

3 a memory forWoring instruction sequences by which the processor- 

4 based system is processed, the memory including a physical memory and a virtual 

5 memory; and \ 

6 a processor for executing the stored instruction sequences; and 

7 wherein the stored instruction sequences include process steps to cause 

8 the processor to: (a) map a plurality of predetermined instruction sequences from 

9 the physical memory to the virtual memory; (b) determine an offset to one of said 

10 plurality of predetermined instruction sequences in the virtual memory; (c) receive 

11 an instruction to execute the one of said plurality of predetermined instruction 
l^f sequences; (d) transfer control to the onetofsaid plurality of predetermined 

13^5 instruction sequences; and (e) process theonet of said plurality of predetermined 

if i instruction sequences from the virtual memory. 

K 28. The system of Claim 27, wherein step (a) comprises the steps of: 

|d (a.l) mapping a plurality of BIOS instruction sequences from the 

13 . physical memory to the virtual memory, said BIOS instruction sequences including 

4 a plurality of BIOS read only memory (ROM) instrukion sequences and a BIOS 

5 service directory; and \ 

6 (a.2) mapping BIOS data from the physical memory to the virtual 

7 memory. \ 
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1 29. The system oAClaim 28, wherein step (b) comprises the steps of: 

2 (b.l) determining a starting virtual address of the BIOS service 

3 directory; and \ 

4 (b.2) determining a\starting virtual address of one of the plurality of 

5 BIOS instruction sequences by reference to the BIOS service directory. 

1 30. The system of Claim 29, Wherein step (d) comprises the steps of: 

2 (d.l) creating a register srack in a memory location and; 

3 (d.2) identifying a locationW the starting virtual address of one of the 

4 plurality of BIOS ROM instruction sequences in the register stack. 

|i 31. The system of Claim 30, wherem step (e) comprises the steps of: 

2fi (e.l) determining if the starting virtual address is within a range of 

p addresses mapped from the physical memory/to/me virtual memory; and 
|0 (e.2) if so, reading the one of the plurality of BIOS ROM instruction 

K sequences from the virtual memory, otherwise indicating that the starting virtual 

5 address is not within the range of addresses mapped from the physical memory to 
fj the virtual memory. \ 

1 32. A method for accessing instruction sequences in physical memory 

2 from virtual memory in a processor-based system, comprising the steps of: 

3 (a) mapping a plurality of predetermined instruction sequences from 

4 the physical memory to the virtual memory; V 
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5 (b) determining an offset to one of said plurality of predetermined 

6 instruction sequences in theWirtual memory; 

7 (c) receiving an instruction to execute the one of said plurality of 

8 predetermined instruction sequences; 

9 (d) transferring comtrol to the one of said plurality of predetermined 
10 instruction sequences; and 



11 



(e) processing the one of said plurality of predetermined instruction 



12 sequences from the virtual memol 



1 33. The method of Claim 32, wherein step (a) comprises the steps of: 

2 (a.l) mapping a plurality of BIOS instruction sequences from the 

15 physical memory to the virtual memok said BIOS instruction sequences including 

4 J a plurality of BIOS read only memory (l^OM) instruction sequences and a BIOS 

5p service directory; and 



it 



(a.2) mapping BIOS data from the physical memory to the virtual 



memory. 



34. The method of Claim 33, wherem step (b) comprises the steps of: 

2 (b.l) determining a starting virtual address of the BIOS service 

3 directory; and 

4 (b.2) determining a starting virtual\address of one of the plurality of 

5 BIOS instruction sequences by reference to the BIOS service directory. 



35. The method of Claim 34, wherein stepYd) comprises the steps of: 
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2 (d.l) creating a register stack in a memory location; and 

3 (d.2) identifying a location of the starting virtual address of one of the 

4 plurality of BIOS ROM instruction sequences in the register stack. 

1 • 36. The method of Claim 35, Virgin step (e) comprises the steps of: 

2 (e.l) determining if thef starting virtual address is within a range of 

3 addresses mapped from the physical merriory to the virtual memory; and 

4 (e.2) if so, reading the one of tme plurality of BIOS ROM instruction 

5 sequences from the virtual memory, otherwise indicating that the starting virtual 

6 address is not within the range of addresses mapped from the physical memory to 

7 the virtual memory. 

P 37. A system to securely utilize Basic Input and Output System (BIOS) 

2J services, comprising: 

# an access driver to generate a service request to utilize BIOS services, 

¥ the service request including a service request signature created using a private key 

p4 in a cryptographic key pair;, and 

§1 an interface to verify the service request signature using a public key in 

6 the cryptographic key pair to ensure the integrity of the service request. 

1 38. The system of Claim 37, wherein: 

2 the access driver generates a session request to establish a session with 

3 the interface; and 
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4 the session request includes a session request signature created using a 

5 private key in a cryptographic key pair. 

1 39. The system of Claim 37, wherein: 

2 the access driver generates a session request to end the session with the 

3 interface; and 

4 the session request includes a session request signature created using a 

5 private key in a cryptographic key pair. 

tfj 40. The system of Claim 37, wherein: 

y the interface generates an authority certificate and sends the authority 

£ certificate to the access driver after receiving a session request; and 
|r the access driver uses information included in the authority certificate to 

fh generate subsequent session requests. 

|§ 41. The system of Claim 40, wherein the authority certificate includes a 

2 new public key. 

1 42. The system of Claim 40, wherein the authority certificate includes a 

2 new private key. 

1 43. The system of Claim 40, wherein the authority certificate includes a 

2 certificate signature. 
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1 44. The system of Claim 37, wherein: 

2 the interface generates an authority certificate and sends the authority 

3 certificate to the access driver after receiving the service request; and 

4 the access driver uses information in the authority certificate to generate 

5 subsequent service requests. 

1 45. A method to securely invoke Basic Input and Output System (BIOS) 
2_ services, comprising: 

|^ creating a service request to invoke BIOS services; 

4~: signing the service request with a service request signature generated 

|rS using a private key in a cryptographic key pair; and 

6 verifying the service request signature using a public key in the 
|3 cryptographic key pair to ensure the integrity of the service request. 

P 46. The method of Claim 45, further comprising: 

2 creating an authority certificate that includes a new private key and a 

3 new public key after processing the service request; 

4 signing a subsequent service request with a service request signature 

5 generated using the new private key; and 

6 verifying the service request signature of the subsequent service 

7 request using the new public key. 

1 47. The method of Claim 45, further comprising: 
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2 performing a BIOS service indicated by a service operation code 

3 included in the service request. 

1 48. The method of Claim 45, further comprising: 

2 creating a session request to establish a session with a ROM Application 

3 Program Interface (RAPI); 

4 signing the session request with a session request signature generated 

5 using a private key in a cryptographic key pair; and 

6 verifying the session request signature using a public key in the 

5 cryptographic key pair to ensure the integrity of the session request. 

Ji 49. The method of Claim 48, further comprising: 

|3 creating an authority certificate that includes a new private key and a 

3- new public key after processing the session request; 

|3 signing a subsequent session request with a session request signature 

M generated using the new private key; and 

6 verifying the session request signature of the subsequent session 

7 request using the new public key. 

1 50. The method of Claim 45, further comprising: 

2 creating a session request to end a session with a ROM Application 

3 Program Interface (RAPI); 

4 signing the session request with a session request signature generated 

5 using a private key in a cryptographic key pair; and 
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6 verifying the session request signature using a public key in the 

7 cryptographic key pair to ensure the integrity of the session request. 

1 51. A computer program embodied on a computer-readable medium to 

2 securely utilize Basic Input and Output System (BIOS) services, comprising: 

3 an access driver to generate a service request to utilize BIOS services, 

4 the service request including a service request signature created using a private key 

5 in a cryptographic key pair; and 

6 an interface to verify the service request signature using a public key in 
*fi the cryptographic key pair to ensure the integrity of the service request. 

1% 52. A computer data signal embodied in a data stream, comprising: 

2h an access driver to generate a service request to utilize BIOS services, 

3U the service request including a service request signature created using a private key 

4D in a cryptographic key pair; and 

5j3 . an interface to verify the service request signature using a public key in 

6 the cryptographic key pair to ensure the integrity of the service request. 
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